CV0-004 Cloud Architecture and Design Practice Question
A company uses Azure and wants to connect its on-premises data center to Azure with a dedicated, private, and high-bandwidth connection. Which service should the company use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure ExpressRoute
Azure ExpressRoute provides a dedicated private connection from on-premises to Azure, offering higher bandwidth and reliability than VPN.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure ExpressRoute
Why this is correct
Azure ExpressRoute provides a dedicated, private circuit through a connectivity provider, bypassing the public internet entirely. This satisfies the stem's requirement for private, high-bandwidth connectivity between the on-premises data centre and Azure, unlike VPN gateways which traverse the public internet and offer variable bandwidth.
- ✗
Site-to-Site VPN
Why it's wrong here
A Site-to-Site VPN tunnels traffic over the public internet, so it cannot provide the dedicated private connection the scenario requires. Site-to-Site VPN would be correct for lower-cost encrypted connectivity where dedicated private bandwidth is not mandated.
- ✗
Azure Front Door
Why it's wrong here
Azure Front Door is a global HTTP/HTTPS layer-7 load balancer and CDN for web applications, so it cannot provide a private dedicated connection between a data centre and Azure. It is tempting because it does improve connectivity and routing, and would be correct for accelerating and load-balancing public web traffic.
- ✗
Azure VPN Gateway
Why it's wrong here
Azure VPN Gateway tunnels traffic over the public internet, so it cannot deliver the dedicated, private circuit the scenario demands. It is tempting because it does provide encrypted site-to-site connectivity, and would be the right choice for lower-bandwidth or backup links where a private circuit is not required.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.